Adding external collaborators as user with synchronized github membership

SonarQube Cloud
1

question:

Hi There,

Our Sonarcloud instance (https://sonarcloud.io/organizations/seequent) is configured to sync members from github which is fine and work for our organization member. However we have a number of projects that have external collaborators working on with us in github.

The problem is that these external collaborators are not members of our github org, for security reasons they are added as external collabs on the repositories that they are contracted to work on. This causes a problem for us in our sonarcloud instance as with member management set to “Automatic sync with Github” there appears to be no way to grant our external collaborators access to our sonarcloud project if this is needed for their work.

Is there some way to do this? Do we need to change “Members Management” to manual? If we do change members management to manual, what effect will this have on existing users?

Regards

Kirk Spragg

3

Hi,

There is currently no support for automatically adding external collaborators. It only works for organization members.

Yes, you need to manage the members manually. When switching to manual, the existing users will stay members of the organization.

Best,
Benoit

6

@Benoit now that we’re a couple of years on, are there any plans to add this please?

We frequently work with outsourcers, and having to manage members in SonarCloud is just 1 more thing on top of everything else :slight_smile:
Ideally they’d get access to any SonarCloud projects where they have access to the associated project on GitHub

1 Like
7

Adding to this – is there at least a way to automate this process of adding/removing members externally, by means of a web-api endpoint or an incoming web hook? Switching to a manual process for this is a lot of unnecessary extra work that has to be done in a timely manner.

8

I am having this same issue. There is no obvious way to add external collaborators to our account.
I have synced our org with our SonarQube account, but I see no button to manually add members… why is this not a feature - it’s so obvious! Please help.

9

For anyone else struggling with this:
The way I overcame this challenge (onboarding external collaborators) was:

  1. Create a team (eg. Org-Name-External Collaborators) within my Github Organization
  2. Set the Team’s repository access to the repositories that the external collaborators need access to.
  3. Changed the base member permissions of the github organization’s member privileges to ‘no permissions’.
  4. Invite the external collaborators to the team.

This approach means the external collaborators only have access to the repositories that were specified in the team, but SonarQube Cloud can now see them as members so they can be added to the SonarCloud organization.